Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
File: UOaW5uJbSSu34HyzKbtDVLERpoE.mft (raw, json)
Hash identifier: difVYfbfLHY+0AZHeqqoK6OtiaKq34cgyyVgK2Cqggw=
Subject key identifier: AB:3B:62:E8:0C:2F:39:8A:29:E9:2C:B3:4D:E4:3F:BC:22:A2:4D:9E
Authority key identifier: 50:E6:96:E6:E2:5B:49:2B:B7:E0:7C:B3:29:BB:43:54:B1:11:A6:81
Certificate issuer: /CN=50e696e6e25b492bb7e07cb329bb4354b111a681
Certificate serial: 0197B70E576A1A3A47D9D44DC8B09256FE6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
Manifest number: 0895
Signing time: Sat 28 Jun 2025 15:00:59 +0000
Manifest this update: Sat 28 Jun 2025 15:00:59 +0000
Manifest next update: Sun 29 Jun 2025 15:00:59 +0000
Files and hashes: 1: UOaW5uJbSSu34HyzKbtDVLERpoE.crl (hash: +N4T7W2WfH28ML0ut/Vj1YWXPS6JRfK57eubILXY+1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:57:6a:1a:3a:47:d9:d4:4d:c8:b0:92:56:fe:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50e696e6e25b492bb7e07cb329bb4354b111a681
Validity
Not Before: Jun 28 15:00:59 2025 GMT
Not After : Jun 29 15:00:59 2025 GMT
Subject: CN=ab3b62e80c2f398a29e92cb34de43fbc22a24d9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6e:49:96:e8:23:bb:33:e8:c7:ec:1b:b5:db:
34:f5:a7:88:77:2c:c7:e4:4f:6b:b1:6f:b5:27:24:
dc:4d:9b:7d:12:ff:b5:44:77:95:27:8f:4d:9d:8e:
d8:23:04:cc:81:db:e1:be:72:84:4a:30:72:17:24:
84:c1:4e:5f:ba:a3:7a:82:b7:81:07:5b:85:10:e3:
12:14:25:6f:84:b1:ec:2d:af:83:6a:76:4f:c7:b9:
7d:bb:63:ac:ce:21:b0:30:b9:e1:f7:f7:16:ef:eb:
e0:3a:d9:e1:6f:7d:7d:7e:e8:d3:23:a6:ac:8c:3b:
04:a6:4f:33:9c:a9:7d:ea:95:45:14:59:ee:6a:91:
f1:26:f3:81:59:c9:be:96:69:f3:f4:db:70:31:ce:
21:af:2a:62:71:11:92:9e:de:91:85:b8:0a:54:52:
7e:dd:bc:20:6e:0a:f3:da:2b:30:8b:b2:90:88:76:
65:c4:ed:d5:a1:bc:41:dd:bb:6f:53:85:d1:7f:14:
cd:05:a5:77:5e:1d:d8:b3:7e:d3:74:83:99:40:78:
1b:2b:2e:a6:f1:4a:79:02:46:21:f1:88:6c:4c:5e:
8d:cb:43:c2:18:b1:a4:9d:f2:32:dd:b7:ae:4e:21:
3a:cb:c6:c1:90:2e:32:c9:aa:26:e8:8d:7c:3b:79:
b0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:3B:62:E8:0C:2F:39:8A:29:E9:2C:B3:4D:E4:3F:BC:22:A2:4D:9E
X509v3 Authority Key Identifier:
keyid:50:E6:96:E6:E2:5B:49:2B:B7:E0:7C:B3:29:BB:43:54:B1:11:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:52:9a:8f:65:a8:14:3f:44:f6:58:80:bc:a3:5f:f1:bb:dc:
a8:0a:fc:ca:ba:f6:37:43:7c:a0:e5:a0:82:ad:dc:7a:fd:38:
22:3a:8c:4a:8e:4a:c8:6b:d3:b2:20:c5:b3:ea:c3:da:89:66:
c5:7c:75:7c:29:08:58:0e:68:34:7b:6c:b1:63:0d:6e:d4:83:
0b:02:61:2c:60:e7:94:fc:20:04:dc:79:fb:2a:f8:69:15:f6:
43:14:e6:df:ad:d9:df:18:b7:0b:d8:5d:3f:b2:1e:65:c0:d8:
40:d8:29:e7:49:d6:a3:85:6f:40:b1:c1:3d:a0:62:a3:d9:06:
37:0a:a5:36:d5:73:f3:d1:72:29:f8:ca:07:96:72:90:cf:7a:
3c:c9:3e:db:f4:e4:4d:69:cd:ee:89:91:13:a8:bb:34:70:e6:
cb:7b:0e:c3:e2:63:b2:5c:ad:78:3d:df:d5:bd:25:5e:85:cb:
6d:60:48:4a:bd:da:75:a3:ce:15:aa:53:f1:c7:24:cc:23:cb:
95:42:7f:ee:4d:3d:f5:1c:ef:d0:45:e3:4d:85:a1:20:d0:5a:
60:02:5b:5f:26:c8:4e:4a:6f:c8:cc:5c:2d:6d:80:2f:a3:0e:
0d:ba:47:d8:b6:f5:ea:af:16:a5:31:48:81:8b:46:19:80:dd:
f5:df:0e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:51:11 2025 by rpki-client